Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215073.roa
File: AS215073.roa (raw, json)
Hash identifier: Z4q0vaJF0C5RDpIgOik+2C1ur6pgdFT3YFCOcH2CC1U=
Subject key identifier: C9:5F:88:B5:74:B9:5D:7F:73:71:8C:35:99:97:E5:26:95:04:12:C7
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1196957797021F866572E37CA595CF44B4F7B431
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215073.roa
Signing time: Wed 11 Jun 2025 07:41:45 +0000
ROA not before: Wed 11 Jun 2025 07:36:45 +0000
ROA not after: Wed 10 Jun 2026 07:41:45 +0000
asID: 215073
IP address blocks: 217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:96:95:77:97:02:1f:86:65:72:e3:7c:a5:95:cf:44:b4:f7:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 11 07:36:45 2025 GMT
Not After : Jun 10 07:41:45 2026 GMT
Subject: CN=C95F88B574B95D7F73718C359997E526950412C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:3a:78:bc:52:e6:dc:5d:3d:2a:36:5d:a2:
9f:a1:5e:13:21:58:68:7f:6c:09:74:8a:e2:c1:57:
2a:cb:df:61:9d:1a:86:cf:00:0f:1f:9b:2f:79:98:
b5:a4:2f:95:11:e9:da:3a:ab:54:aa:2c:87:09:1a:
ef:d7:10:1b:d1:c7:c3:8c:bb:be:24:ed:ca:58:aa:
53:7f:c8:bf:75:8d:d6:b4:20:b9:6c:ed:6b:59:35:
5a:c6:b4:ee:87:c5:99:cf:c0:67:1f:4d:07:3a:8c:
42:79:f5:94:8c:c4:cd:b7:2f:8f:36:a1:58:4b:24:
b9:e4:7a:c8:92:1e:6a:b2:b3:83:bd:77:06:ad:0f:
f0:48:10:e5:68:fc:59:09:86:22:0c:4b:8f:ea:17:
c1:a6:d9:f4:06:19:35:b7:a0:b6:01:3d:ab:25:69:
d3:15:8f:ff:b8:3e:05:80:26:36:22:fe:7e:f9:3c:
36:0e:b2:65:d8:23:f0:f9:b6:4f:a3:d5:c0:1f:43:
fd:03:f2:f3:f8:e8:95:8f:d1:15:8e:4c:b8:cd:ef:
e3:14:1d:61:df:7f:eb:4f:fd:2b:31:90:7b:9e:09:
4a:11:0b:e4:f1:57:d2:53:55:75:41:94:9f:36:aa:
21:d6:ab:90:d1:c9:12:97:fc:2c:a8:50:cf:cb:17:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:88:B5:74:B9:5D:7F:73:71:8C:35:99:97:E5:26:95:04:12:C7
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
68:99:2f:f3:64:e3:b3:bf:6b:22:87:a2:a3:85:86:0a:7b:d2:
96:ec:9b:09:b9:11:c0:06:cc:c0:18:30:44:d8:10:52:be:02:
dd:14:2d:5b:1f:1b:0e:8a:bf:ce:eb:a1:19:5d:63:0c:fb:65:
c5:0e:5b:72:4d:c4:8c:67:ac:7c:a2:ae:83:14:7c:80:a2:ea:
d5:33:97:c4:d6:0d:d9:4f:90:dd:d0:17:9d:66:a1:2e:b8:f3:
cb:48:52:55:c1:8a:e8:db:2c:be:a0:55:72:08:1b:fd:d3:06:
ea:d8:1b:71:7a:0a:10:57:ba:97:0c:3e:03:ef:af:79:9e:ed:
36:f4:72:1d:fc:f6:f8:1b:cd:8a:0d:4c:dc:4c:b8:25:df:7e:
3b:e0:89:32:d4:b4:80:f5:69:eb:61:e3:ee:4d:de:b3:72:6f:
a8:d2:3c:fd:01:e8:83:e0:b8:7b:49:3f:07:63:f0:da:dc:85:
72:47:d5:c0:bc:14:94:54:ff:fc:a5:03:d2:bf:3c:bb:5c:e3:
fa:f7:5b:48:c5:c9:db:c8:e6:9f:6e:ee:53:3b:43:9b:dd:98:
d5:91:50:14:a0:b8:0f:82:63:98:55:58:a0:28:39:ab:72:40:
00:28:45:25:5b:0e:b3:a3:55:c9:a2:27:ae:fd:b2:ff:f8:58:
41:5f:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:48 2025 by rpki-client